Aspects of Dependable Linux Systems
Explore key aspects of building reliable and robust Linux systems with insights from industry experts.
Building Scalable Platforms - Lessons from Embedded Systems to Finance
Explore universal patterns for building top-performing platforms across industries. Gain insights on creating inspiring engineering environments that unleash creativity and innovation.
Attacking Hexagon Security Analysis of Qualcomm's ADSP
Explore Qualcomm's Hexagon ADSP security, architecture, and exploitation techniques. Learn reverse engineering methodologies for proprietary systems and mitigations bypass on Android devices.
Onyx-Native, Information Flow Models and Scientific Computing
Explore Onyx-Native library for modernizing legacy scientific computing systems, focusing on information flow models and their application to complex, long-lived codebases like NOAA's ASOS Ingest System.
Bahn API Chaos
Einblick in die APIs der Deutschen Bahn: Struktur, Einheitlichkeit und Anwendung am Beispiel von marudor.de. Analyse der Datengrundlage und ihrer Herausforderungen.
Ericsson RBS 6000 Base Stations
Explore system architecture of Ericsson RBS 6000 cellular base stations, focusing on GSM interfaces for Osmocom 2G stack integration. Gain insights into modern telecom infrastructure design.
Deploying Two-Factor Authentication to Millions of Users
Comprehensive guide on implementing two-factor authentication for large-scale websites, covering design, architecture, and various methods like TOTP, push notifications, and FIDO security keys.
Inter VM Data Exfiltration - The Art of Cache Timing Covert Channel on x86 Multi-Core
Explore cache timing covert channels in x86 multi-core systems, learning techniques for inter-VM data exfiltration and reverse shell establishment using shared resources and architecture imperfections.
Next Gen Web Pen Testing - Handling Modern Applications in a Penetration Test
Explore modern web application security testing techniques, including HTTP/2, WebSockets, CORS, REST APIs, and Content Security Policy. Learn to adapt penetration testing methods for evolving technologies.
Infrastructure of Wikipedia - 36C3 Wikipaka WG
Explore Wikipedia's infrastructure: serving 100k requests/second, protecting user privacy, and running on donations. Learn about system architecture, databases, caching, and more.
SAP BusinessObjects Attacks
Explore SAP BusinessObjects vulnerabilities, architecture, and attack vectors. Learn about security recommendations and potential issues through demonstrations and in-depth analysis.
Witness the Russian Attack - Live Demos of Their Steps, Tools, Techniques
Explore Russian cyberattack techniques through live demonstrations, covering infection methods, web injects, traffic manipulation, and victim targeting strategies.
Applying Security Engineering Principles to Complex Composite Systems
Explore security engineering principles for complex systems, focusing on composite elements, interactions, and dependencies across the system lifecycle, illustrated with a Smart City transit example.
Living on Master - Using Yocto Project, Jenkins and LAVA for a Rolling Release
Explore continuous integration for Yocto Project using Jenkins and LAVA, focusing on real-time Linux kernel testing and addressing challenges in maintaining up-to-date embedded systems.
Trusted Execution Environments - A Technical Overview of Intel SGX, Arm TrustZone, and RISC-V PMP
Explore key trusted execution environments: Intel SGX, Arm TrustZone, and RISC-V PMP. Learn their architectures, security features, and implementation processes for robust data protection.
Call Me Back! Attacks on System Server and System Apps in Android through Synchronous Callback
Explore Android security vulnerabilities through synchronous callbacks, examining attacks on system servers and apps, and discussing detection methods and defense strategies.
How We Saved 5x Migrating from Aurora to FoundationDB
Explore Segment's migration from Aurora to FoundationDB, detailing architecture, cost savings, and operational challenges in identity resolution for customer Personas modeling.
Namespacing the Linux Integrity Measurement Architecture
Explore Linux Integrity Measurement Architecture namespacing, its benefits for containers, implementation challenges, and proposed solutions. Learn about test suite development and upstreaming process.
VM Security and Container Workflows - A Case Study
Explore the synergy between containers and virtual machines for enhanced multi-tenant systems. Learn about CoreOS's innovative approach to building a secure and efficient container platform.
VDUSE - vDPA Device in Userspace
Explore vDPA devices in userspace, their architecture, implementation, and future prospects. Learn about VDUSE's control and data paths, and how to create a VDUSE daemon.
Cramming for FISMA - How to Launch a NIST 800-53 Moderate System in 180 Days
Practical guide for rapidly deploying a NIST 800-53 compliant system, covering challenges, solutions, and best practices for meeting FISMA requirements within tight deadlines.